
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json)
Hash identifier: LewRaypMuxyMNncGoim2k1NFsZ+GDv5iu5y2NEuLen4=
Subject key identifier: FD:17:FC:ED:52:43:F6:BB:9A:0C:17:84:EF:17:AF:E5:A6:87:AC:14
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 0698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
Manifest number: 066B
Signing time: Sun 26 Jul 2026 23:35:13 +0000
Manifest this update: Sun 26 Jul 2026 23:35:12 +0000
Manifest next update: Sun 02 Aug 2026 23:35:12 +0000
Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: KGy8qxx7sr5dj0i/bLv1dOxCJ6kN+LjXqcnvsS2CN6Q=)
2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: leZ0cCoOlR1k5yKepuZNpVBVHzz4KHAcvcnF8Cllio0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Jul 26 23:35:12 2026 GMT
Not After : Aug 2 23:35:12 2026 GMT
Subject: CN=6a6699b1-13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:3a:4b:b0:9f:37:32:4f:9c:02:dd:7b:91:
c8:8a:f8:10:00:bf:57:2a:b2:27:d9:ec:52:65:02:
b7:e6:f1:24:5f:07:eb:ea:ff:19:d2:48:63:b2:34:
44:a1:8b:47:5d:70:06:a5:35:6b:f6:a3:e6:86:2e:
4e:f0:75:97:6b:58:cf:49:60:15:89:a1:9e:05:37:
2c:e5:0a:6d:95:89:fd:dc:dc:87:40:29:11:b0:c7:
ba:a7:07:83:9c:af:9d:38:9f:0b:49:41:d7:b2:f0:
bc:39:60:3a:a6:19:a6:eb:b2:d0:fa:71:71:58:86:
a5:1a:03:a1:75:12:1b:7d:66:96:c0:a1:08:47:b3:
c1:13:15:b8:42:ee:03:3a:4c:22:06:ca:23:9c:64:
17:bb:5c:34:28:f6:cc:df:94:eb:de:93:ad:f4:15:
93:d9:1d:4c:a2:29:33:ff:d2:b8:5c:17:7a:90:6f:
8e:e8:bf:d3:f2:9f:a7:e2:c1:63:ff:be:84:80:30:
df:37:3e:87:b5:6f:d0:56:d9:0a:e8:9a:89:9b:72:
ac:70:67:24:1f:76:c3:c9:2e:79:9c:e5:21:71:51:
f6:6d:8d:0a:62:07:03:a9:af:ce:0e:0e:b7:c9:d2:
62:7d:94:b8:45:97:78:1d:ea:32:da:d9:a5:b7:70:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:17:FC:ED:52:43:F6:BB:9A:0C:17:84:EF:17:AF:E5:A6:87:AC:14
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:6f:32:8d:db:1b:b4:50:e2:31:e1:dc:8e:8f:fe:2d:3a:76:
bf:c1:66:a7:dc:83:f1:3b:9f:a6:15:d2:72:a5:51:84:8e:53:
9d:d0:e3:d7:6f:91:a5:c5:70:92:f9:54:2f:5c:d7:1e:fc:7e:
b0:64:03:93:78:a8:2d:1f:c2:3f:85:d3:fb:a3:97:46:b2:3f:
0c:fc:c5:5f:28:67:13:7a:b9:95:38:64:de:2f:5a:86:ea:e2:
4c:ca:0c:f9:df:6e:15:84:2b:37:52:14:c1:ad:ab:41:cf:39:
80:4c:f0:6a:d6:32:7c:f2:11:33:19:25:77:08:4a:d7:95:b8:
64:84:c1:c5:4a:99:f7:13:28:80:7a:34:3c:5d:14:31:4b:12:
28:83:cf:29:37:f8:e0:2d:44:f9:ed:74:ad:77:ee:7b:70:ad:
7e:d2:3d:3f:85:0b:30:09:02:f7:c2:87:ce:65:a2:f1:dd:f4:
c1:e8:a1:04:4a:c5:20:0d:f9:75:61:de:32:a1:53:14:95:60:
d8:d1:7a:53:8a:34:4d:a3:0f:66:ae:2a:22:f1:33:3e:54:70:
a4:41:b4:f0:d1:64:99:ba:d9:71:e4:ae:dd:28:bb:68:4c:de:
65:9d:98:47:91:28:bb:63:f6:cf:73:b4:83:f7:cf:c8:46:50:
93:ac:4d:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw
MzAzRDcxQzkwHhcNMjYwNzI2MjMzNTEyWhcNMjYwODAyMjMzNTEyWjAYMRYwFAYD
VQQDEw02YTY2OTliMS0xM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiQ6S7CfNzJPnALde5HIivgQAL9XKrIn2exSZQK35vEkXwfr6v8Z0khjsjRE
oYtHXXAGpTVr9qPmhi5O8HWXa1jPSWAViaGeBTcs5QptlYn93NyHQCkRsMe6pweD
nK+dOJ8LSUHXsvC8OWA6phmm67LQ+nFxWIalGgOhdRIbfWaWwKEIR7PBExW4Qu4D
OkwiBsojnGQXu1w0KPbM35Tr3pOt9BWT2R1Moikz/9K4XBd6kG+O6L/T8p+n4sFj
/76EgDDfNz6HtW/QVtkK6JqJm3KscGckH3bDyS55nOUhcVH2bY0KYgcDqa/ODg63
ydJifZS4RZd4Heoy2tmlt3Ct6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP0X/O1S
Q/a7mgwXhO8Xr+Wmh6wUMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB
MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls
SHVZSFFlTGhud1lEQTljY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA7W8yjdsbtFDiMeHcjo/+LTp2v8Fmp9yD8TufphXScqVRhI5TndDj12+RpcVw
kvlUL1zXHvx+sGQDk3ioLR/CP4XT+6OXRrI/DPzFXyhnE3q5lThk3i9ahuriTMoM
+d9uFYQrN1IUwa2rQc85gEzwatYyfPIRMxkldwhK15W4ZITBxUqZ9xMogHo0PF0U
MUsSKIPPKTf44C1E+e10rXfue3CtftI9P4ULMAkC98KHzmWi8d30weihBErFIA35
dWHeMqFTFJVg2NF6U4o0TaMPZq4qIvEzPlRwpEG08NFkmbrZceSu3Si7aEzeZZ2Y
R5Eou2P2z3O0g/fPyEZQk6xNEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:41 2026 by rpki-client